$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa File: fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa (raw, json) Hash identifier: IdmI60AkzXEXm/JmcEaxJwgwGLMQgEWUU+2GUmdELyc= Subject key identifier: AC:2C:60:44:99:1C:1A:1B:6C:5C:12:29:76:30:F2:DA:2A:B2:B1:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAAB1AFF53BD39C5FFD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.25.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:aa:b1:af:f5:3b:d3:9c:5f:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=ba0187b9-ff77-4aba-808d-5dba73c46955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:89:62:33:64:0d:43:58:ba:38:bb:89:07: ef:a7:c9:07:6e:34:22:a4:24:e5:93:39:08:a5:a5: 01:ce:3e:ed:a4:39:2f:de:5d:8f:ec:25:e3:d9:2c: f3:5c:58:bf:f1:c3:e3:3c:8d:6e:c2:5b:e8:22:35: d7:d2:58:dd:f9:93:38:40:dc:3c:7d:ae:d2:c5:48: bc:f2:68:e3:41:0e:00:5c:ec:5d:60:30:4d:74:21: 87:d4:ad:4c:2a:46:0e:cd:30:06:b0:2a:12:df:23: 3a:04:83:eb:8c:2e:7c:65:71:96:d4:c0:10:0b:98: 67:d8:36:49:32:c1:92:d6:ab:94:4d:49:8c:da:0a: 85:ad:b9:87:4e:48:73:e6:dc:eb:c8:8a:c7:45:99: 46:3b:71:df:6b:d5:df:ef:c1:0b:2c:a3:04:94:2b: 33:6a:6c:34:21:ef:ac:a1:81:a5:42:13:e8:d9:ab: 36:57:c8:e0:a0:bd:c9:bf:9c:f7:ad:98:c8:59:8c: 75:8a:f8:a2:35:3e:86:be:d8:a4:b8:50:f5:ba:1d: fc:b7:49:a3:d1:b5:b2:a3:34:db:8c:5f:90:1e:65: 26:c3:c6:43:fc:98:fa:bf:85:22:1f:8e:07:fb:12: 23:25:a9:b0:14:ad:24:f3:05:30:84:2a:d3:fc:d6: c8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:60:44:99:1C:1A:1B:6C:5C:12:29:76:30:F2:DA:2A:B2:B1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:35:80:d0:b0:e2:a7:2f:0b:a8:93:a3:63:89:c8:87:46:8d: 57:ba:25:eb:11:74:e1:2d:04:f7:67:6f:4e:a3:ff:83:b5:ef: 3a:2c:52:2b:61:74:ca:42:f8:87:09:04:11:e0:02:75:cf:ca: 0e:87:54:b2:77:9b:f6:e1:01:6a:62:fd:09:e3:b2:8f:b4:d5: e2:49:9f:c0:c9:b9:17:94:07:7c:0b:ef:ee:f7:76:f8:1e:f7: 00:ec:26:52:f2:9e:96:10:cc:9a:6d:e1:f6:f5:88:11:6c:01: c4:c5:93:57:c7:9d:21:dc:62:0e:0b:34:e6:bb:a3:b9:21:cf: 82:92:91:7b:b6:48:18:69:9b:69:0f:36:d2:15:5d:ad:ee:39: 82:6f:d5:21:f7:b7:56:4b:d7:37:94:40:25:65:da:10:aa:09: ce:5b:f1:94:16:d1:ab:0d:91:38:fd:14:6d:7e:19:77:d2:91: 37:b1:52:9c:7b:6d:03:44:e4:d8:79:0e:fa:ee:95:06:c5:e8: a1:b9:33:28:ec:0d:96:12:a5:e8:37:75:9e:fb:7a:67:ed:e6: 54:6f:86:df:cd:65:f2:dd:9a:d1:66:ef:36:e4:6b:40:cf:86: 65:6c:46:96:05:cd:36:2e:31:74:4f:2c:01:39:41:8f:09:0c: a1:c6:db:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6qxr/U705xf/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmEwMTg3YjktZmY3Ny00YWJhLTgwOGQtNWRiYTczYzQ2OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAuJYjNkDUNYuji7iQfvp8kHbjQipCTlkzkI paUBzj7tpDkv3l2P7CXj2SzzXFi/8cPjPI1uwlvoIjXX0ljd+ZM4QNw8fa7SxUi8 8mjjQQ4AXOxdYDBNdCGH1K1MKkYOzTAGsCoS3yM6BIPrjC58ZXGW1MAQC5hn2DZJ MsGS1quUTUmM2gqFrbmHTkhz5tzryIrHRZlGO3Hfa9Xf78ELLKMElCszamw0Ie+s oYGlQhPo2as2V8jgoL3Jv5z3rZjIWYx1iviiNT6GvtikuFD1uh38t0mj0bWyozTb jF+QHmUmw8ZD/Jj6v4UiH44H+xIjJamwFK0k8wUwhCrT/NbIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwsYESZHBobbFwSKXYw8toqsrFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmRmY2FmZGEtOTFmNS0z N2MyLTk4M2UtN2Y5YmExMzI0YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo1gNCw4qcvC6iTo2OJyIdGjVe6JesRdOEtBPdnb06j/4O17zosUith dMpC+IcJBBHgAnXPyg6HVLJ3m/bhAWpi/Qnjso+01eJJn8DJuReUB3wL7+73dvge 9wDsJlLynpYQzJpt4fb1iBFsAcTFk1fHnSHcYg4LNOa7o7khz4KSkXu2SBhpm2kP NtIVXa3uOYJv1SH3t1ZL1zeUQCVl2hCqCc5b8ZQW0asNkTj9FG1+GXfSkTexUpx7 bQNE5Nh5DvrulQbF6KG5MyjsDZYSpeg3dZ77emft5lRvht/NZfLdmtFm7zbka0DP hmVsRpYFzTYuMXRPLAE5QY8JDKHG20M= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:39 2025 by rpki-client